How to limit the size of the connection method parameter
i connected an fms server like var nc = new netconnection ();
nc.connect ("rtmfp :/ / localhost: 61018/zy/1", a);
but how restrict the size of the parameter a, assuming that this a set to a 10gb object, or a large byte, i found that the server received. this allows the hacker attacks, is there way to limit the size of this a, i hope that does not exceed 100kb.
rtmfp encodes low-level messages in manner compatible rtmp messages. rtmp messages length-field limited 16mb (24 bits), , there artificial software limit less (approximately 10mb if recall correctly).
it should not possible send connect message rtmfp or rtmp server exceeding 10mb.
bytearray limited 4gb, , can't serialized amf beyond 512mb (29 bits).
also keep in mind rtmfp or rtmp server receive such large message, many bytes must sent somewhere (you).
More discussions in Cirrus
adobe
Comments
Post a Comment